Configure security certificates

Question 1

Create a free App Service managed certificate

Answer 1

A private certificate that’s free of charge and easy to use if you just need to secure your custom domain in App Service.

Question 2

Purchase an App Service certificate

Answer 2

A private certificate that’s managed by Azure. It combines the simplicity of automated certificate management and the flexibility of renewal and export options.

Question 3

Import a certificate from Key Vault

Answer 3

Useful if you use Azure Key Vault to manage your certificates.

Question 4

Upload a private certificate

Answer 4

If you already have a private certificate from a third-party provider, you can upload it.

Question 5

Upload a public certificate

Answer 5

Public certificates aren’t used to secure custom domains, but you can load them into your code if you need them to access remote resources.

Question 6

Private certificate requirements

Answer 6

Exported as a password-protected PFX file, encrypted using triple DES.
Contains private key at least 2048 bits long
Contains all intermediate certificates in the certificate chain

To secure a custom domain in a TLS binding, the certificate has other requirements:

Contains an Extended Key Usage for server authentication (OID = 1.3.6.1.5.5.7.3.1)
Signed by a trusted certificate authority